PT-2024-14388 · Ieit · Ieit Nf5280M6 Uefi Firmware

Published 2024-04-29 · Updated 2024-07-03 · CVE-2023-52080

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions IEIT NF5280M6 UEFI firmware versions through 8.4

Description The issue is caused by improper use of the gRT->GetVariable() function, leading to a pool overflow vulnerability. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. If critical data in memory is tampered with, a crash may occur.

Recommendations For IEIT NF5280M6 UEFI firmware versions through 8.4, consider restricting access to local NVRAM variables to minimize the risk of exploitation. As a temporary workaround, avoid modifying variables on SPI Flash until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-52080

Affected Products

Ieit Nf5280M6 Uefi Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-52080 · Security Note
• https://t.me/cvenotify/78431 · Telegram Post
• https://ieisystem.com · Note
• https://support.ieisystem.com/lcjtww/psirt/security-advisories/2751271/index.html · Note